CVE-2017-8700Medium

ASP.NET Core Information Disclosure Vulnerability

Published
June 2, 2026
Last Modified
—

🔗 CVE IDs covered (1)

📋 Description

An information disclosure vulnerability exists in ASP.NET Core that allows bypassing Cross-origin Resource Sharing (CORS) configurations. An attacker who successfully exploited the vulnerability could retrieve content, that is normally restricted, from a web application. The security update addresses the vulnerability by enforcing CORS configuration to prevent its bypass.

🎯 Affected products2

  • ASP.NET Core 1.0
  • ASP.NET Core 1.1

✅ Remediation

KBCommit (Security Update)

🔗 References (2)